Hello there. I’m attempting to create an Oauth 2.0 App (it’s my first time + I’m a new programmer so I don’t have much experience with this) although I keep getting the error “One or more redirect uris are invalid” after adding my redirect URL.
I’ve already checked the basic stuff, yes it’s https and not http, and when I go to the redirect url it works as intended. I created an oauth before but never ended up using it, although I never ran into this issue. The only thing I can think of is that it might be the fact that my domain is “workers.dev” and not something like “.com/.xyz” (but keep in mine it worked fine when i did it before ). This error has like no context which is pretty frustrating! The url looks valid to me so I don’t understand why it’s not to roblox.
If anyone can help I would appreciate it very much! Thanks.
+1 to this. I’ve just created a whole web app hosted on Cloudflare Workers, but the “.dev” domain is apparently not allowed in redirect URLs. I don’t see any reason why the redirect URLs are restricted to certain TLDs.
Testing now, it seems that ‘.dev’ domains work fine, and so do domains with invalid TLDs like ‘.roblox’ or ‘whatever’. This leads me to think that it’s a TLD blocklist rather than an allowlist, since the TLDs ‘.cf’, ‘.ga’, ‘.gq’, ‘.ml’, and fail with the same error.
I’d really like to see a fix for this soon since it’s blocking the deployment of my Roblox OAuth app on my own domain.
It appears that “workers.dev” specifically is blacklisted. I bought a domain and used that on my Cloudflare Worker as a workaround instead.
It might be helpful to have a list of blacklisted domains documented somewhere, or even just an error popup saying that “Domain <abc.xyz> is not allowed” when trying to use a blocked domain, in any relevant context, to avoid confusion and unnecessary bug reports.